Forward Alfis domain names to external Alfis resolver

1 files changed, 16 insertions, 2 deletions

diff --git a/nixos/common.nix b/nixos/common.nix
index e898dec..ef1fcff 100644
--- a/nixos/common.nix
+++ b/nixos/common.nix
@@ -38,10 +38,24 @@ in
 
   networking.networkmanager.enable = true;
 
-  services.unbound = {
+  services.unbound =
+  let
+    alfisTld = [ "anon." "btn." "conf." "index." "merch." "mirror." "mob." "screen." "srv." "ygg." ];
+  in {
     enable = true;
     resolveLocalQueries = true;
-    settings.server.log-servfail = true;
+    settings = {
+      server = {
+        log-servfail = true;
+        domain-insecure = alfisTld;
+      };
+      forward-zone = map (tld: {
+          name = tld;
+          forward-addr = "324:71e:281a:9ed3::53";
+          forward-tcp-upstream = false;
+          forward-tls-upstream = false;
+        }) alfisTld;
+    };
   };
   services.resolved.enable = false;